Skip to content
Threat Feed
Subscribe

Tag

Gravcms

2 briefs RSS
critical advisory

Grav CMS API Blueprint Upload Privilege Escalation

A low-privileged authenticated API user with `api.media.write` can abuse `/api/v1/blueprint-upload` in Grav CMS to write an arbitrary YAML file into `user/accounts/`, enabling creation of a super-admin account and leading to full administrative compromise of the Grav API.

grav gravcms privilege-escalation yaml-injection
2r 1t
critical advisory

Grav CMS FormFlash Unauthenticated Path Traversal and Arbitrary File Write

Grav CMS is vulnerable to an unauthenticated path traversal vulnerability within the FormFlash component, allowing attackers to create arbitrary directories and write files, leading to configuration injection and potential denial of service; fixed in version 2.0.0-beta.2.

grav path-traversal file-write gravcms
2r 2t